<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: icinga web 2</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-30164: Icinga Web 2 is an open source monitoring web interface, framework and command-line interface</title><link>https://patchthecve.com/cve/CVE-2025-30164.html</link><guid>https://patchthecve.com/cve/CVE-2025-30164.html</guid><pubDate>Wed, 17 Jun 2026 09:08:16 +0000</pubDate><description>MEDIUM 4.1: Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 vulnerability allows an attacker to craft a URL that, once visited by an authenticated user (or one that is able to authenticate), allows to manipula</description></item><item><title>CVE-2025-27609: Icinga Web 2 is an open source monitoring web interface, framework and command-line interface</title><link>https://patchthecve.com/cve/CVE-2025-27609.html</link><guid>https://patchthecve.com/cve/CVE-2025-27609.html</guid><pubDate>Wed, 17 Jun 2026 09:03:54 +0000</pubDate><description>MEDIUM 5.4: Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 allows an attacker to craft a request that, once transmitted to a victim&#x27;s Icinga Web, allows to embed arbitrary Javascript into it and to act on beh</description></item><item><title>CVE-2025-27405: Icinga Web 2 is an open source monitoring web interface, framework and command-line interface</title><link>https://patchthecve.com/cve/CVE-2025-27405.html</link><guid>https://patchthecve.com/cve/CVE-2025-27405.html</guid><pubDate>Wed, 17 Jun 2026 09:03:31 +0000</pubDate><description>HIGH 7.6: Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 allows an attacker to craft a URL that, once visited by any user, allows to embed arbitrary Javascript into Icinga Web and to act on behalf of that u</description></item><item><title>CVE-2025-27404: Icinga Web 2 is an open source monitoring web interface, framework and command-line interface</title><link>https://patchthecve.com/cve/CVE-2025-27404.html</link><guid>https://patchthecve.com/cve/CVE-2025-27404.html</guid><pubDate>Wed, 17 Jun 2026 09:03:31 +0000</pubDate><description>HIGH 7.6: Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 allows an attacker to craft a URL that, once visited by any user, allows to embed arbitrary Javascript into Icinga Web and to act on behalf of that u</description></item></channel></rss>